Bugs item #3413181, was opened at 2011-09-23 09:24
Message generated for change (Comment added) made by taneliv
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=3413181&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: http
Group: crash
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Taneli Vähäkangas (taneliv)
Assigned to: Daniel Stenberg (bagder)
Summary: SIGSEGV while POSTing large data

Initial Comment:
I'm trying to send data to an upload service at www.plupload.com:
curl -O -d name=foo.jpg --data-binary @xaa -d chunk=0 -d chunks=10 http://www.plupload.com/upload.php
(Please note that this might be wrong format for the service, it isn't particularly well documented.)
If the file xaa has more than about 130k bytes, curl will crash with segmentation fault. See below gdb backtrace:

(gdb) run
Starting program: /home/taneli/bin/curl -O -d name=foo.jpg --data-binary @xaa -d chunk=0 -d chunks=10 http://www.plupload.com/upload.php
[Thread debugging using libthread_db enabled]
  % Total % Received % Xferd Average Speed Time Time Time Current
                                 Dload Upload Total Spent Left Speed
 84 132k 0 0 84 112k 0 139k --:--:-- --:--:-- --:--:-- 174k
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff7457abb in memcpy () from /lib/x86_64-linux-gnu/libc.so.6
(gdb) bt
#0 0x00007ffff7457abb in memcpy () from /lib/x86_64-linux-gnu/libc.so.6
#1 0x00007ffff7b954a4 in readmoredata () from /home/taneli/lib/libcurl.so.4
#2 0x00007ffff7bafe52 in Curl_fillreadbuffer () from /home/taneli/lib/libcurl.so.4
#3 0x00007ffff7bb08c5 in Curl_readwrite () from /home/taneli/lib/libcurl.so.4
#4 0x00007ffff7bb1fc3 in Curl_do_perform () from /home/taneli/lib/libcurl.so.4
#5 0x0000000000408d07 in main ()
(gdb)

This happens with both 7.22.0 and ubuntu natty's 7.21.3 on x86-64, at the same spot.

----------------------------------------------------------------------

>Comment By: Taneli Vähäkangas (taneliv)
Date: 2011-09-23 10:24

Message:
Ah, a further detail: it is the later memcpy() in readmoredata().

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=3413181&group_id=976
Received on 2011-09-23